CVE-2026-10514

creationtimestamp| type| source ---|---|--- 2026-06-02 01:16:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbgbdnijw2z...

CVE-2026-10514 1Panel-dev CordysCRM RequestParamTrimConfig.java cross site scripting

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend/framework/src/main/java/cn/cordys/config/RequestParamTrimConfig.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...